6.8
CVSSv2

CVE-2010-0921

Published: 03/03/2010 Updated: 17/08/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Cross-site request forgery (CSRF) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) prior to 229.281 for Domino 8.0.2 FP4 allows remote malicious users to hijack the authentication of unspecified victims via vectors related to lack of "XSS/CSRF Get Filter and Referer Check fixes."

Vulnerable Product Search on Vulmon Subscribe to Product

ibm lotus_inotes 229.201

ibm lotus_inotes 229.191

ibm lotus_inotes 229.111

ibm lotus_inotes 229.101

ibm lotus_inotes

ibm lotus_inotes 229.221

ibm lotus_inotes 229.211

ibm lotus_inotes 229.141

ibm lotus_inotes 229.131

ibm lotus_inotes 229.021

ibm lotus_inotes 229.011

ibm lotus_inotes 229.261

ibm lotus_inotes 229.251

ibm lotus_inotes 229.181

ibm lotus_inotes 229.171

ibm lotus_inotes 229.061

ibm lotus_inotes 229.051

ibm lotus_inotes 229.241

ibm lotus_inotes 229.231

ibm lotus_inotes 229.161

ibm lotus_inotes 229.151

ibm lotus_inotes 229.041

ibm lotus_inotes 229.031